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Please amend the following paragraphs of the specification in the 
manner indicated: 

[0052] In summary, exec rules remove the need to modify 
existing programs or use trusted gateways, by directly 
specifying the security attributes of a process after 
calling another program. Exemplary apparatus suitable for 
carrying out the process of FIG. 3 may comprise may include 
filtering means for filtering a set of capabilities of a 
logically protected computing environment and modifying 
only one or more of those capabilities, as selected by the 
filtering means. Monitoring moan — s- means may be provided 
for monitoring operations performed by the system which 
modify names of files making up services or programs to 
which an execution control rule applies . 


